# DHCP Role Based Access Control (RBAC)

DHCP subnets, supernets, and hosts in your organizations' servers can now be assigned to individuals in the network based on their roles. Admins can grant access to selected users for specific subnets, supernets, and hosts in the network.

To grant access to users in the network:

1. Click through **Settings > Users > Add User.**

![DHCP RBAC Step 1](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-1.png)

2. Provide the details in the following fields:

![DHCP RBAC User Details](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-new.png)

- **NAME:** Provide the name of the individual in the network.
- **USERNAME:** Provide their username assigned in the network.
- **EMAIL:** Provide the network admin's email ID.
- **PASSWORD:** Provide the password for configuration.
- **TOTP:** Enable TOTP for Two step verification before granting access to subnets, supernets, or hosts.
- **ROLE:** Select the role you want to assign to the individual. There are 4 different role options, and only **Operator** and **Guest** roles can be granted access to subnets, supernets, or hosts.
- **CLUSTERS:** Select the cluster from which monitors and domains need access granted for the individuals.
- **TYPE:** Select from which network service's resources need access granted.

![IPAM Permissions](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-ipam-perms.png)

The IPAM Permissions field allows network administrators to selectively grant individuals access to view the IPAM Tower View data of the cluster. The **View** type allows users to view the data, while the **Restrict** type completely prevents users from accessing the IPAM data.

![Select Supernet](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-3.png)

3. Select the supernet you want to grant access for the users in the **Select Supernets** field.

4. When the supernet is selected, two new options get displayed for the **SUPERNET PERMISSION:**

   - **MANAGE** - This option can only allow the user to manage the existing subnets in the selected supernet.
   - **MANAGE AND CONFIGURE** - This option can allow the user to both manage the subnets and also create new subnets within the selected supernet.

5. Below that, you can select subnets for access granting, where you can select all the subnets in the network by clicking on **ALL**, or select specific subnets by clicking on **SELECT SUBNETS.**

![Select Subnets](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-4.png)

6. Finally, you can select the hosts for access granting, where admins can select **ALL** for managing all the hosts in the cluster, or select **ASSIGNED SUBNETS** or **ASSIGNED SUPERNETS** for managing hosts under the assigned subnets or supernets, accessible by the user.

![Select Hosts](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-5.png)

![Save Configuration](https://cdn.manageengine.com/sites/meweb/images/dns-dhcp-ipam/dhcp-rbac-save.png)

7. Click on **+Add Cluster Permissions** option to save the configurations, and click on **Save to** add the user with the access permissions in the network.